CNX-001 · Question #6
CNX-001 Question #6: Real Exam Question with Answer & Explanation
The correct answer is A: Least privilege. Least privilege: Granting users access to the payroll app strictly according to their roles enforces the principle of least privilege. Microsegmentation: Placing the host in its own 192.168.77.32/30 subnet isolates it from other workloads, achieving microsegmentation.
Question
An architect needs to deploy a new payroll application on a cloud host. End users' access to the application will be based on the end users' role. In addition, the host must be deployed on the 192.168.77.32/30 subnet. Which of the following Zero Trust elements are being implemented in this design? (Choose two.)
Options
- ALeast privilege
- BDevice trust
- CMicrosegmentation
- DCASB
- EWAF
- FMFA
Explanation
Least privilege: Granting users access to the payroll app strictly according to their roles enforces the principle of least privilege. Microsegmentation: Placing the host in its own 192.168.77.32/30 subnet isolates it from other workloads, achieving microsegmentation.
Topics
Community Discussion
No community discussion yet for this question.